General
-
Target
cf649d3cc8742a7e7df9a33c012a1944b338f739fd21062e15061fffd4d7e71d
-
Size
3.0MB
-
MD5
6e9b8f5621ceeb3aadb21217c1ee2116
-
SHA1
bb835e20e1a1952b6b39307d488bb48327b20371
-
SHA256
cf649d3cc8742a7e7df9a33c012a1944b338f739fd21062e15061fffd4d7e71d
-
SHA512
163f2214f9e488d74fa8629a5191320ce1d21d184e256bbe117129c2d79c5236b2c219bf7f56083173fe28e6f8af792365c636ef76b813a19063c849aeb6557e
-
SSDEEP
49152:71G1NtyBwTI3ySZbrkXV1etEKLlWUTOfeiRA2R76zHrWax9hMkibTIA5LDGTUXaS:71ONtyBeSFkXV1etEKLlWUTOfeiRA2RZ
Score
10/10
Malware Config
Signatures
-
Detects executables containing URLs to raw contents of a Github gist 1 IoCs
-
UPX dump on OEP (original entry point) 1 IoCs
-
XMRig Miner payload 1 IoCs
-
Xmrig family
-
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
cf649d3cc8742a7e7df9a33c012a1944b338f739fd21062e15061fffd4d7e71d
Headers
Sections